Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C109D30BDCF11EA8755D90DC4F9AE02.roa
File:                     6C109D30BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          UPiGIg8ro9Nb4EepgRu6wUMh9zKNPZy6n02LucZHzRw=
Subject key identifier:   A4:58:6E:D0:C6:89:C8:6F:B8:E4:8B:9C:13:AC:B2:23:74:58:95:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6DE8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C109D30BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:31:36 +0000
ROA not before:           Wed 10 May 2023 16:31:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139524
IP address blocks:        103.142.114.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28136 (0x6de8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:31:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc6e7-9d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:69:20:f7:f9:4d:b7:e0:de:42:26:e9:2b:
                    9c:19:16:5f:54:09:48:d0:af:f1:a2:d4:4b:ed:f4:
                    2a:04:dd:66:e6:c9:e9:9a:9c:5a:32:c0:76:10:a5:
                    55:7f:26:63:ec:e5:3d:ed:f8:0b:00:da:7a:2e:1a:
                    11:2c:2b:4e:f9:bc:de:29:3c:df:45:88:1c:f6:1e:
                    26:03:ee:f1:c1:fa:38:0a:ce:b4:09:f3:23:87:c8:
                    2b:2f:97:52:40:cd:dc:47:1c:b0:93:e8:e2:11:22:
                    d2:38:10:6d:51:ed:72:fe:db:b4:9e:67:8b:7d:8f:
                    05:d5:27:80:31:78:46:01:be:75:b5:d8:dc:ba:d2:
                    42:30:76:a8:7a:bd:e2:4f:b8:82:c3:8c:e5:66:b5:
                    ec:d8:1f:d9:4c:4c:c8:f2:a2:20:9d:9a:d2:8c:0a:
                    ee:1c:4b:ec:7f:8d:ef:1c:03:2b:27:37:16:3f:6b:
                    28:5d:71:2d:f3:7d:6a:2d:d0:f3:93:f6:29:89:23:
                    e9:1a:f0:2c:85:9c:7a:df:01:52:66:b3:9e:ac:63:
                    bb:a4:73:f7:2e:9d:00:a6:4a:f9:72:90:9f:b4:a1:
                    82:eb:72:5d:0f:5d:93:e4:71:a9:9e:a6:62:94:8c:
                    22:c1:52:23:b5:9a:67:64:c7:f5:50:67:2c:70:21:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:58:6E:D0:C6:89:C8:6F:B8:E4:8B:9C:13:AC:B2:23:74:58:95:FB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C109D30BDCF11EA8755D90DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:b3:a1:0f:15:d5:85:7a:cb:43:1f:20:93:63:2b:e1:02:c5:
         fb:ab:28:8c:f1:21:c4:c0:da:4d:68:56:10:d8:dd:ad:60:5a:
         1f:7c:4a:39:4f:b8:53:3f:13:d8:89:fc:61:72:c0:d4:e0:cb:
         8b:ad:1d:bf:b7:31:57:88:d9:c0:4b:e7:e2:54:79:b0:13:f6:
         89:a9:66:6d:de:6c:bc:77:de:46:d3:2b:fc:8d:d9:b7:8a:df:
         5d:a5:b5:37:d3:7f:df:a5:bd:33:0d:3d:ea:6b:ca:b1:93:5c:
         4a:3a:ba:7c:95:89:14:cf:4a:eb:15:fd:46:38:0e:47:b9:f7:
         ab:e6:df:62:89:06:de:4e:a9:72:09:fb:03:e5:0c:42:71:88:
         86:de:73:f7:75:13:33:20:5b:f9:a4:7d:7f:48:99:5d:cf:76:
         3c:ca:23:49:b3:05:57:f3:54:5c:a5:aa:75:24:15:49:25:c0:
         64:39:06:8e:11:40:6c:0c:f1:06:73:2a:7e:66:10:b3:99:97:
         d5:06:91:12:3f:e8:e6:c3:e9:a9:45:ab:7c:bf:bb:bb:09:08:
         8f:97:5b:43:95:8e:fe:58:b1:35:7d:da:ad:b5:b1:af:27:7f:
         8d:f6:6c:26:57:f9:cd:7f:9d:94:9a:cf:ef:54:f7:59:b2:b7:
         b1:07:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org